snats: deduplicate allocation logic
rules: add support for netifd-generated rules

Signed-off-by: Steven Barth <steven@midlink.org>